Legal

Privacy Policy

This policy explains how Gimble Foundation collects, uses, stores, and protects your personal information when you use our website or mobile app.

1. Who we are

Gimble Foundation is a nonprofit organisation headquartered in Lagos, Nigeria, working to make mental fitness part of everyday life across Africa. We operate the website at www.gimblefoundation.org and the Gimble mobile app.

For privacy questions, contact us at hello@gimblefoundation.org.

2. Information we collect

We collect only the information we need to provide and improve our services.

  • Account information. When you create an account in the app, we collect your first name, last name, email address, and password.
  • Content you create. Check-ins, journal entries, habit logs, questionnaire answers, topic preferences, and skill-builder reflections. This content is private to your account.
  • Device and technical information. Device type, operating system, app version, and a push-notification device token if you choose to enable reminders.
  • Website form submissions. When you use our contact form, subscribe to updates, or join the community list, we collect the email address and any details you provide.
  • Usage data. Aggregated information about how the app and website are used, such as feature usage and crash reports, to help us improve stability and experience.

3. How we use your information

We use your information to:

  • Provide, personalise, and maintain the Gimble app and website.
  • Send you the reminders, updates, and communications you have opted into.
  • Respond to your questions, feedback, and support requests.
  • Improve our tools, content, and programs.
  • Keep the app secure and troubleshoot issues.
  • Comply with legal obligations and protect our rights.

4. Legal basis for processing

We process your personal data based on one or more of the following grounds: your consent, the need to perform a contract with you (such as providing the app), our legitimate interest in operating and improving our nonprofit services, or compliance with applicable law.

5. Who can see your data

Your journal entries, check-in notes, and other personal content are visible only to you. They are not shared, published, or reviewed by our team unless you explicitly request support and provide permission.

We use a small number of trusted service providers to run our services, such as cloud hosting, email delivery, and push notifications. These providers only process data on our behalf and under strict confidentiality and security obligations.

6. Data sharing and selling

We do not sell your personal data. We do not share your personal data with advertisers. We only share information when required by law, to protect our rights and safety, or with service providers who help us deliver the app and website.

7. Data retention

We keep your personal data for as long as your account is active or as needed to provide you with our services. If you delete your account, we remove your personal data within 7 to 14 business days, except where we are required to keep it for legal, security, or operational reasons.

8. Your rights

Depending on where you live, you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete information.
  • Delete your account and personal data.
  • Object to or restrict certain processing.
  • Withdraw consent at any time.

To exercise any of these rights, email us at hello@gimblefoundation.org.

9. Security

We take reasonable technical and organisational measures to protect your information, including encryption in transit, access controls, and secure infrastructure. However, no online service can guarantee complete security. Please keep your account credentials safe and contact us if you suspect unauthorised access.

10. Children's privacy

The Gimble app and website are intended for users aged 13 and older. If you are under 18, please use our services with the involvement of a parent or guardian. We do not knowingly collect personal data from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly.

11. International data transfers

Gimble Foundation is based in Nigeria and uses service providers that may process data in other countries. By using our services, you understand that your information may be transferred to and processed in jurisdictions with different data-protection laws. We take steps to ensure appropriate safeguards are in place.

12. Cookies and similar technologies

Our website does not use tracking cookies for advertising. We may use essential cookies or local storage to remember your preferences, such as dark mode, and to keep the site functioning properly.

13. Third-party links

Our website and app may contain links to third-party websites or services, such as app stores or partner organisations. This privacy policy does not apply to those services. Please review their privacy policies before sharing your information.

14. Changes to this policy

We may update this privacy policy from time to time. If we make material changes, we will post the updated policy on this page with a revised effective date. Continued use of our services after changes means you accept the updated policy.

15. Contact us

If you have any questions about this privacy policy or how we handle your data, please contact us at hello@gimblefoundation.org or through our contact form.

Last updated: 10/09/2026